
$ rpki-client -vvf rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.mft
File: LQGhlCuv2dOzHdv-dTJLrWK2CVg.mft (raw, json)
Hash identifier: eK7MhMw4GaymobLPs4B6rNzF0FGa5GPbI4goCRqQ9Os=
Subject key identifier: 3F:BE:32:67:49:14:5E:64:28:21:82:D8:4D:03:05:91:A5:47:91:0E
Authority key identifier: 2D:01:A1:94:2B:AF:D9:D3:B3:1D:DB:FE:75:32:4B:AD:62:B6:09:58
Certificate issuer: /CN=A91855B3/serialNumber=2D01A1942BAFD9D3B31DDBFE75324BAD62B60958
Certificate serial: E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQGhlCuv2dOzHdv-dTJLrWK2CVg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.mft
Manifest number: DF
Signing time: Thu 23 Jul 2026 08:19:34 +0000
Manifest this update: Thu 23 Jul 2026 08:19:33 +0000
Manifest next update: Thu 30 Jul 2026 08:19:33 +0000
Files and hashes: 1: LQGhlCuv2dOzHdv-dTJLrWK2CVg.crl (hash: ZOAl9cKVwiW63qSnBHU3kGDa/ZU9Ssddf2Zo2i/0FtQ=)
2: E62BCC784C9211F09A2E3014C4F9AE02.roa (hash: xT5qy146gRzAu39NzX0c8OhjswZUhA9rByvpjRnnGOU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.crl
rsync://rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQGhlCuv2dOzHdv-dTJLrWK2CVg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:19:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 231 (0xe7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91855B3, serialNumber=2D01A1942BAFD9D3B31DDBFE75324BAD62B60958
Validity
Not Before: Jul 23 08:19:33 2026 GMT
Not After : Jul 30 08:19:33 2026 GMT
Subject: CN=6a61ce96-bea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:da:35:98:df:d4:54:f1:17:fb:01:94:cf:28:
ae:72:14:c2:3b:10:72:77:dc:e4:01:e1:73:ab:60:
d5:ef:d4:30:2d:fd:f9:d0:d4:d1:bf:3f:c7:27:fc:
d9:16:37:ee:42:20:1d:28:42:ea:b0:c1:50:00:96:
dc:66:3c:df:19:ad:df:d3:ed:95:bb:24:22:9f:a8:
62:3d:b9:ef:da:76:b6:ad:12:58:05:b3:77:94:fc:
14:41:48:a2:39:23:20:26:e9:14:93:44:54:d0:59:
8f:6c:06:83:22:64:c0:3b:b4:b6:b1:ee:98:6f:cf:
72:a3:92:96:dd:09:8b:4d:28:6d:f2:87:17:cb:c2:
33:2a:da:05:b5:f3:9b:d4:4b:b4:fe:85:ee:38:29:
29:50:61:a5:6b:8a:03:1d:de:a0:de:28:c4:ac:4d:
d0:69:0f:ae:6f:f4:8b:18:53:2b:d2:11:50:21:b2:
3c:ef:2d:25:2f:86:97:2c:95:ea:27:c5:0d:a5:56:
b6:98:0c:a7:b1:87:64:ed:4f:29:ca:2e:97:f2:e0:
9d:a4:71:f2:aa:69:8c:67:47:ac:0f:af:8d:44:62:
aa:85:04:53:28:96:a7:81:ab:e1:33:ce:c5:12:5c:
14:74:68:43:65:13:d0:71:b7:1e:ee:2c:b9:2a:b9:
ed:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:BE:32:67:49:14:5E:64:28:21:82:D8:4D:03:05:91:A5:47:91:0E
X509v3 Authority Key Identifier:
keyid:2D:01:A1:94:2B:AF:D9:D3:B3:1D:DB:FE:75:32:4B:AD:62:B6:09:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQGhlCuv2dOzHdv-dTJLrWK2CVg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:ea:b2:db:fa:b3:4c:38:73:01:74:4a:78:1a:57:1d:bb:0a:
d9:50:b8:06:be:43:02:2d:8f:2c:bc:d8:18:35:8c:88:72:f9:
84:64:7d:64:fb:32:7b:a0:d2:73:5c:7a:de:2f:ff:8b:8c:8b:
0d:ad:e6:6b:41:47:63:20:65:22:9a:60:51:05:e2:f8:b7:e6:
e7:e2:92:13:35:5c:63:d3:9e:0e:5d:d5:53:3b:51:64:9d:43:
c5:db:25:f2:7e:b8:ce:ee:2c:74:8f:ae:e4:96:b3:06:94:a7:
9a:3a:5b:1d:d0:f4:3f:af:f3:c5:41:9c:c0:2c:35:3d:82:cd:
c8:09:e5:96:23:70:41:13:31:82:3a:34:65:58:18:49:6e:6c:
8e:e3:df:5a:13:2c:46:8a:23:77:ca:75:a4:42:60:19:71:e1:
08:74:c9:28:7f:fe:ee:03:99:37:ed:1d:18:f2:0c:af:b3:b9:
a6:fd:1f:91:d6:e8:17:fb:62:4d:74:9b:26:c7:27:02:68:52:
61:35:b7:f8:72:b2:d7:d1:4c:cb:d0:11:db:41:22:82:59:30:
dd:6b:3e:3a:63:30:3c:e4:e5:18:6a:16:78:c8:79:d5:c2:09:
e3:5d:6d:7f:75:2e:f1:d2:f2:7f:80:4a:b4:2c:7c:24:5a:bd:
ab:fb:c7:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:13:22 2026 by rpki-client